This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft File: aUCPaxygKBZoPM5MCOAEkyUZRLI.mft (raw, json) Hash identifier: EHP6jrOrjyYf/mOb3MXIX5c48/+HbonotLtjVw6j4qg= Subject key identifier: 45:FD:D5:6F:18:3E:CC:17:29:AC:4B:49:72:B1:27:31:AE:39:A9:46 Authority key identifier: 69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2 Certificate issuer: /CN=A91166FC/serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2 Certificate serial: 0AAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft Manifest number: 0A96 Signing time: Sat 20 Dec 2025 19:05:07 +0000 Manifest this update: Sat 20 Dec 2025 19:05:06 +0000 Manifest next update: Sat 27 Dec 2025 19:05:06 +0000 Files and hashes: 1: aUCPaxygKBZoPM5MCOAEkyUZRLI.crl (hash: 6BZ3/ArZMz3ODYtJPDNW5FZtKkO/1X3WT+fDvegd+Pg=) 2: 834C938A12C711F09998A234C4F9AE02.roa (hash: M4mfahqMzwmq58j++0Teybq9n4Aqspe3mvfksixkbgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2732 (0xaac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91166FC, serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2 Validity Not Before: Dec 20 19:05:06 2025 GMT Not After : Dec 27 19:05:06 2025 GMT Subject: CN=6946f363-5632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:69:b0:ec:20:5b:e7:12:57:0e:3f:ed:bc:cf: 7b:9b:20:30:0e:1e:03:0c:f8:2b:07:c9:38:54:0e: 8a:66:7e:57:74:3a:8b:00:38:d6:50:4a:44:1a:9e: 71:bd:d1:e6:6e:4b:fb:32:cf:a9:a9:1b:14:e2:d5: 31:a0:c8:ba:e5:10:b4:26:64:96:e4:74:25:01:6e: ae:f7:d6:68:fc:01:79:ec:5d:3f:bd:62:6c:9b:45: 5a:34:f9:00:63:8d:5a:00:cd:f1:26:79:b5:8b:c2: b6:dd:5e:41:5a:87:f4:b9:97:0b:43:b6:fa:c8:81: e3:62:76:64:c9:24:02:6a:3b:96:c8:8a:2b:6f:8f: 47:c5:82:bf:0a:9c:6e:3c:c3:41:d6:3f:fa:db:f6: 46:0a:9f:29:0d:c0:0d:8f:7b:2c:dd:91:e6:6b:6a: 81:12:4f:7f:5e:a9:46:6d:bd:56:ee:05:ad:e3:53: f2:4a:a5:16:6f:b6:d3:28:e9:90:aa:be:c8:73:b9: 08:dc:90:ee:d1:a9:3c:3a:c9:e6:ef:55:5e:b8:e2: 87:de:e5:29:2a:00:1f:e5:09:5d:d8:09:64:b8:9e: 5b:e1:06:a6:d1:90:52:b6:7e:29:b2:f7:3f:f8:4d: 32:07:62:07:1f:01:6f:42:0f:4b:57:ac:b6:21:4b: de:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FD:D5:6F:18:3E:CC:17:29:AC:4B:49:72:B1:27:31:AE:39:A9:46 X509v3 Authority Key Identifier: keyid:69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:25:c8:ba:0e:6c:42:d0:67:c3:65:0a:21:ac:7c:12:d3:81: ea:ae:ab:f1:bf:d4:ed:95:53:b8:e8:03:bd:b6:e9:04:95:ba: 76:9a:3f:59:1b:63:d8:c5:c1:92:25:ef:de:10:d0:54:75:8e: 9d:24:8e:eb:2a:8c:f1:12:d4:15:5e:c8:aa:c7:51:b2:11:e5: 87:ed:42:94:94:dd:89:c5:35:d7:2c:25:93:b2:c1:dc:f7:e2: 72:10:4a:ed:7c:e0:b4:f3:3f:5e:97:91:f4:76:81:a0:0b:89: 93:56:91:c5:64:5d:e4:eb:a4:7e:b1:89:1d:59:6a:8b:8d:cb: c2:f0:00:a3:01:3e:e4:27:f5:7f:f2:fb:24:fa:6c:11:0e:5a: 4d:f3:6b:67:a7:ac:42:c9:e1:64:b5:49:06:8c:97:f8:49:16: 0c:e7:f0:f5:21:15:eb:ca:20:26:80:fc:89:cb:21:f7:1d:42: a2:d8:dd:35:bf:db:70:bf:63:4f:6a:96:b6:fe:07:f5:b3:5c: 97:aa:7d:93:44:ca:a7:da:37:72:c2:3f:2a:65:01:bd:e9:8f: d5:ee:5b:9c:5f:f7:e1:fc:d0:ad:65:3c:c6:e8:db:d6:c9:95: d2:cc:1d:40:31:1c:ea:52:5b:c2:03:53:23:6f:07:a4:86:b6: eb:ef:0a:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY2RkMxMTAvBgNVBAUTKDY5NDA4RjZCMUNBMDI4MTY2ODNDQ0U0QzA4RTAwNDkz MjUxOTQ0QjIwHhcNMjUxMjIwMTkwNTA2WhcNMjUxMjI3MTkwNTA2WjAYMRYwFAYD VQQDDA02OTQ2ZjM2My01NjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWmw7CBb5xJXDj/tvM97myAwDh4DDPgrB8k4VA6KZn5XdDqLADjWUEpEGp5x vdHmbkv7Ms+pqRsU4tUxoMi65RC0JmSW5HQlAW6u99Zo/AF57F0/vWJsm0VaNPkA Y41aAM3xJnm1i8K23V5BWof0uZcLQ7b6yIHjYnZkySQCajuWyIorb49HxYK/Cpxu PMNB1j/62/ZGCp8pDcANj3ss3ZHma2qBEk9/XqlGbb1W7gWt41PySqUWb7bTKOmQ qr7Ic7kI3JDu0ak8Osnm71VeuOKH3uUpKgAf5Qld2AlkuJ5b4Qam0ZBStn4psvc/ +E0yB2IHHwFvQg9LV6y2IUvedwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEX91W8Y PswXKaxLSXKxJzGuOalGMB8GA1UdIwQYMBaAFGlAj2scoCgWaDzOTAjgBJMlGUSy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjZGQy9BQjFGNEVDQTcy OUExMUVBQUJCRjkxNDFDNEY5QUUwMi9hVUNQYXh5Z0tCWm9QTTVNQ09BRWt5VVpS TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FVQ1BheHlnS0Jab1BNNU1DT0FFa3lVWlJMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjZGQy9BQjFGNEVDQTcyOUExMUVBQUJCRjkxNDFDNEY5QUUwMi9hVUNQYXh5Z0tC Wm9QTTVNQ09BRWt5VVpSTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxJci6DmxC0GfDZQohrHwS04Hqrqvxv9TtlVO46AO9tukElbp2mj9Z G2PYxcGSJe/eENBUdY6dJI7rKozxEtQVXsiqx1GyEeWH7UKUlN2JxTXXLCWTssHc 9+JyEErtfOC08z9el5H0doGgC4mTVpHFZF3k66R+sYkdWWqLjcvC8ACjAT7kJ/V/ 8vsk+mwRDlpN82tnp6xCyeFktUkGjJf4SRYM5/D1IRXryiAmgPyJyyH3HUKi2N01 v9twv2NPapa2/gf1s1yXqn2TRMqn2jdywj8qZQG96Y/V7lucX/fh/NCtZTzG6NvW yZXSzB1AMRzqUlvCA1Mjbwekhrbr7woJ -----END CERTIFICATE-----Generated at Sun Dec 21 19:22:08 2025 by rpki-client